WO2013083072A1

WO2013083072A1 - Method and system for digital content online reading authentication

Info

Publication number: WO2013083072A1
Application number: PCT/CN2012/086147
Authority: WO
Inventors: 李小磊; 万巍; 瞿超; 雷超
Original assignee: 北大方正集团有限公司; 北京方正阿帕比技术有限公司
Priority date: 2011-12-09
Filing date: 2012-12-07
Publication date: 2013-06-13
Also published as: KR101578886B1; EP2690574A1; EP2690574A4; US20130254534A1; CN103164636B; CN103164636A; KR20140043083A; EP2690574B1; US8943312B2; JP2015502586A

Abstract

The present invention relates to the technical field of computer information. Disclosed are a method and system for digital content online reading authentication, the method comprising: receiving a first request for online reading from a terminal, acquiring the first user information contained in the first request, acquiring the first authority information corresponding to the first user information to generate a first authority model, acquiring the first certificate information corresponding to the first authority model to further generate a second request containing the first authority model and first certificate information, and authenticating the first certificate information contained in the second request and M function authority in the first authority model, therefore solving the system performance problem caused by frequent signal interaction between systems, simplifying digital content management, preventing unauthorized leeching and protecting the digital content copyright.

Description

Method and system for online reading digital content authentication

This application claims priority to Chinese Patent Application No. 201110409347.8, entitled "A Method and System for Online Reading of Digital Content Authentication", filed on December 9, 2011, the entire contents of which are hereby incorporated by reference. Combined in this application. Technical field

The present invention relates to the field of computer information, and in particular, to a method and system for online digital content authentication. Background technique

With the rapid development of digital content, more and more people pay attention to and read digital content, and the reading method gradually evolves into online reading. However, the competition for online reading is becoming more and more fierce, in order to protect the copyright of digital content. Therefore, the control of permissions is especially important for digital content.

At present, the online reading function provided by various digital content products can control the rights of digital content to achieve the purpose of copyright protection. In the prior art, there are two implementation modes:

1. Autonomous control mode, which usually includes the management function of digital content, and the authority to maintain digital content. When the user requests online reading, the user can provide the corresponding reading range by querying the rights of digital content.

2. Interface control mode. This method is independent from the digital content. It is not responsible for the management of the rights. It only provides the online reading function. When the user requests to read online, it actively requests the rights of the user to the rights management center, and provides the corresponding scope after obtaining the permission information. read.

In the process of implementing the present invention, the Applicant has found that at least the following technical problems exist in the above technologies:

The autonomous control method needs to realize the management of all digital content, and the reading function is confused with the function of the business system. The function is not independent and cannot be provided as a general reading tool. Service.

The interface control mode needs to communicate frequently with the rights management center, causing performance obstacles. At the same time, when the third party accesses online reading, it needs to develop a corresponding interface, which causes cost increase. Summary of the invention

The invention provides a method and a system for online digital content authentication, which are used to solve the problem that the function is confused in the autonomous control mode in the prior art, the function cannot be independent, and the information interaction needs to be frequently performed in the interface control mode. .

A method for online digital content authentication, comprising:

Receiving an online read first request from the terminal, and acquiring first user information in the first request;

Obtaining, according to the correspondence between the stored rights information and the user information, the first rights information corresponding to the first user information, and generating a first rights model according to the first rights information, where the first rights model includes The M function rights owned by the user, where M is greater than or equal to 1; obtaining the first certificate information corresponding to the first permission model according to the correspondence between the stored certificate information and the permission model;

Generating a second request including the first permission model and the first certificate information; authenticating the first certificate information included in the second request and the M function rights in the first permission model.

Preferably, the first privilege model includes: a read scope privilege, an online concurrent privilege, a service time privilege, a copy privilege, a functional privilege in a print privilege, or a combination of a plurality of functional privilege, and each of the functional privilege Functional rights have a corresponding effective time period.

Preferably, the first certificate information includes: a unique certificate and an effective time limit corresponding to the certificate.

Preferably, the authenticating the first certificate information included in the second request and the M function rights in the first privilege model specifically include:

Acquiring the first permission model in the second request and the First certificate information, and;

And authenticating the first certificate information, and authenticating the M function rights in the first permission model according to the authentication result of the first certificate information, and

And providing the online reading content corresponding to the plurality of function rights through which the authentication is passed to the terminal according to the authentication result of the M function rights.

Preferably, the authenticating the first certificate information includes:

Obtaining a valid time period in the first certificate information;

Comparing the valid time period of the first certificate information with the current time, if the valid time period of the certificate is after the current time, the certificate authentication is passed, and the first permission model is parsed; otherwise , rejecting the second request.

Preferably, the parsing the first permission model specifically includes:

Obtaining the M function rights in the first permission model and an effective time period corresponding to each function authority;

Comparing the effective time period of each of the M function rights with the current time, if the valid time period of the L function rights of the M function rights is after the current time, providing the The online reading content corresponding to the L functional rights is given to the terminal, where L is greater than or equal to 0 and is less than or equal to an integer of M.

A system for reading digital content authentication online, specifically comprising:

a service processing system, configured to receive a first request for online reading from a terminal, and obtain first user information in the first request, and obtain the first information according to a correspondence between the stored right information and the user information a first authority information corresponding to the user information, and generating a first permission model according to the first authority information, where the first permission model includes M function rights owned by the user, where M is greater than or equal to 1, according to the stored Corresponding relationship between the certificate information and the permission model, obtaining first certificate information corresponding to the first permission model, and generating a second request including the first permission model and the first certificate information;

The online reading system is configured to receive the second request, and authenticate the first certificate information included in the second request and the M function rights in the first permission model. Preferably, the online reading system specifically includes:

a receiving module, configured to receive the second request;

An obtaining module, configured to acquire the first permission model and the first certificate information in the second request;

a certificate authentication module, configured to authenticate the first certificate information;

The permission model authentication module is configured to authenticate the M function rights in the permission model according to the authentication result of the first certificate information;

The content providing module is configured to provide the online reading content corresponding to the plurality of function rights through which the authentication is passed to the terminal according to the authentication result of the M function rights.

Preferably, the certificate authentication module includes:

a certificate validity time obtaining unit, configured to obtain a valid time period in the first certificate information, and a certificate valid time authentication unit, configured to compare a valid time period of the first certificate information with a current time, if the current time Within the validity time period of the certificate, the certificate authentication is passed, otherwise the second request is rejected.

Preferably, the rights model authentication module performs authentication on the M function rights in the permission model, including:

The valid time period of the L function rights among the M function rights is compared with the current time.

The specific technical effects of one or more embodiments of the present invention are as follows:

Receiving a first request for online reading from the terminal, and acquiring first user information in the first request, obtaining first permission information corresponding to the first user information, and generating a first permission according to the first permission information And obtaining, according to a correspondence between the stored certificate information and the permission model, the first certificate information corresponding to the first permission model, and generating a second request that includes the first permission model and the first certificate information And authenticating the first certificate information included in the second request and the M function rights in the first permission model. Further solving the frequent interaction of signals between systems The system performance problem caused by the realization of the simplicity of digital content management, while also ensuring the security of digital content, inhibiting illegal chain hacking, and well protected the copyright of digital content. DRAWINGS

1 is a flow chart of a method for online digital content authentication according to the present invention;

2 is a schematic diagram of definition of a first authority model according to the present invention;

3 is a flow chart of authenticating the first permission model and the first certificate information in the second request by the online reading system of the present invention;

4 is a system for online reading digital content authentication according to the present invention;

FIG. 5 is a schematic structural diagram of an online reading system according to the present invention. detailed description

The present invention provides a method and system for online digital content authentication, which is used to obtain user information and generate a corresponding permission model after the user sends a request to the service processing system when the user needs to perform online reading. The certificate is sent to the online reading system, and the online reading system provides all the functional rights owned by the user according to the permission model and the certificate. Furthermore, it solves the system performance problem caused by frequent signal interaction between systems, realizes the simplicity of digital content management, and ensures the security of digital content.

The technical solution of the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments.

Figure 1 shows a flow chart of a method for online digital content authentication. The specific process is as follows:

Step 101: Receive an online read first request from the terminal, and obtain first user information in the first request.

Step 102: Obtain first permission information corresponding to the first user information according to the correspondence between the stored permission information and the user information, and generate a first permission model according to the first permission information, where the first permission The model contains M function permissions owned by the user, where M is greater than or equal to 1. The service processing system pre-stores the correspondence between the rights information and the user information. After the service processing system obtains the first user information, the service processing system consults the pre-stored corresponding relationship, thereby obtaining the first user information corresponding to the first A permission information, wherein the first permission information includes a function authority owned by the user may be a definition of one or more function rights.

After obtaining the first privilege information, the service processing system generates a first privilege model according to the definition of one or more functional privilege in the first privilege information, so that the first privilege model includes the M owned by the user. Function permissions, where M is greater than or equal to 1.

The M function rights may be a combination of a read range right, an online concurrent right, a service time right, a copy right, a print right, or a plurality of function rights, and may be in accordance with a user's needs in the business processing system. Increase or decrease feature permissions.

In addition, in order to prevent any one of the M function rights from being used by the user indefinitely, each of the M function rights has a corresponding effective time limit.

Step 103: Obtain first certificate information corresponding to the first permission model according to a correspondence between the stored certificate information and the permission model.

After the first privilege model is generated, the correspondence between the certificate information and the privilege model is stored in the service processing system, so after obtaining the first privilege model, the service processing system according to the first privilege model Obtain a unique first certificate information.

In order to enable the user's certificate to be effectively used within a certain period of time, after obtaining the certificate in the first certificate information, an effective time period corresponding to the certificate is obtained, thereby avoiding the user using the same indefinite period. The certificate information also makes the copyright of digital content well protected.

Step 104: Generate a second request that includes the first permission model and the first certificate information, and send the second request to an online reading system.

After the step 102 and the step 103, the service processing system obtains the first authority information corresponding to the first user information and the first certificate information corresponding to the first authority information, and then the service processing system sets the first permission model and the first certificate. Information added to the URL parameter (Uniform Resource Locator) Generating a second request including the first permission model and the first certificate information.

The first privilege model is transmitted through a URL parameter, and the rule is a first privilege model followed by a privilege scope, and the definition may be extended according to actual requirements. As shown in Figure 2, V indicates read permission, followed by 1-5, 15-30 indicating that the current user can view the contents of pages 1 to 5 and pages 15 to 30; other permission definitions can be based on actual An extension definition is required.

Step 105: The first certificate information included in the second request and the M function rights in the first permission model are authenticated.

After receiving the second request, the online reading system first authenticates the first certificate information in the second request, and then uses the authentication structure of the first certificate information to the M function rights in the first permission model. Perform authentication.

As shown in FIG. 3, the flow chart of the first permission model and the first certificate information in the second request of the online reading system includes:

Step 301: Acquire, according to the second request, the first permission model and the first certificate information in the second request.

After receiving the second request, the online reading system obtains the first permission model in the second request and the valid time period corresponding to the M function rights in the first permission model, and obtains the first certificate information and the first The validity period of a certificate.

Step 302: Perform authentication on the first certificate information, and perform authentication on the M function rights in the first permission model according to the authentication result of the first certificate information.

The online reading system first authenticates the first certificate information, and the first certificate information includes a unique certificate and an effective time period corresponding to the certificate, and the legality of the system authentication certificate is read online. If the certificate is legal, the validity period of the certificate is authenticated; if the certificate is not legal, the second request is rejected.

If the user privately modifies the content in the permission model, the certificate authentication is invalid and the second request is rejected.

After the validity of the authentication certificate, the validity time period of the certificate is authenticated, and the valid time period of obtaining the first certificate is compared with the current time when the user uses the certificate, if the certificate is After the current time period is after the current time, the certificate authentication is passed, and the first permission model is parsed; otherwise, the second request is rejected. After the authentication is passed, the online reading system authenticates the first permission model.

The online reading system obtains the M function rights in the first permission model and the valid time period corresponding to each of the M function rights, and obtains the current time of receiving the second request, and the M is obtained. The valid time period for each of the functional rights is compared to the current time.

Step 303: Provide, according to the authentication result of the M function rights, the online reading content corresponding to the plurality of function rights that are authenticated to the terminal.

If the valid time period of the L function rights is after the current time, the online reading content corresponding to the L function rights is provided to the terminal, and the user may be on the terminal. Directly obtain the services corresponding to the L function rights, avoid frequent sending requests and frequent information interaction. Where L is greater than or equal to 0, an integer less than or equal to M.

As shown in FIG. 4, a system for online digital content authentication, specifically includes:

The service processing system 401 is configured to receive a first request for online reading from the terminal, and obtain first user information in the first request, and obtain the foregoing according to a correspondence between the stored right information and the user information. The first privilege information corresponding to the first user information, and the first privilege model is generated according to the first privilege information, where the first privilege model includes M functional privileges owned by the user, where M is greater than or equal to 1, according to the storage Corresponding relationship between the certificate information and the permission model, obtaining the first certificate information corresponding to the first permission model, and generating a second request including the first permission model and the first certificate information.

The online reading system 402 is connected to the service processing system, and configured to receive the second request, and authenticate the first certificate information included in the second request and the M function rights in the first permission model .

FIG. 5 is a schematic structural diagram of an online reading system, which specifically includes:

The receiving module 501 is configured to receive the second request. The obtaining module 502 is configured to acquire the first permission model and the first certificate information in the second request;

The certificate authentication module 503 is configured to authenticate the first certificate information.

The permission model authentication module 504 is configured to authenticate the M function rights in the permission model according to the authentication result of the first certificate information;

The content providing module 505 is configured to provide the online reading content corresponding to the plurality of function rights through which the authentication is passed to the terminal according to the authentication result of the M function rights.

Further, the certificate authentication module 503 further includes:

The certificate validity time period obtaining unit is configured to obtain a valid time period in the first certificate information.

a certificate validity time period authentication unit, configured to compare the valid time period of the first certificate information with the current time, and if the current time is within the valid time period of the certificate, the certificate authentication is passed, otherwise the rejection is The second request.

Further, the permission model module performs authentication on the M function rights in the permission model, including:

The present invention provides a method for online digital content authentication, receiving a first request for online reading from a terminal, and acquiring first user information in the first request, and obtaining a first corresponding to the first user information. And the first privilege model is generated according to the first privilege information, and the first credential information corresponding to the first privilege model is obtained according to the correspondence between the stored credential information and the privilege model, and the generating includes the The first permission model and the second request of the first certificate information, the first certificate information included in the second request and the M function rights in the first permission model are authenticated. Furthermore, it solves the system performance problem caused by frequent signal interaction between systems, realizes the simplicity of digital content management, and also ensures the security of digital content. It has a restraining effect and protects the copyright of digital content. The spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and the modifications of the invention

Claims

Rights request

A method for online digital content authentication, characterized in that it comprises:

2. The method according to claim 1, wherein the first permission model comprises: a reading scope authority, an online concurrent authority, a service time permission, a copy permission, a function permission in the print permission, or a plurality of functions. A combination of permissions, and each of the above functional permissions has a corresponding valid time period.

3. The method according to claim 2, wherein the first certificate information comprises: a unique certificate and an effective time period corresponding to the certificate.

The method according to claim 3, wherein the authenticating the first certificate information included in the second request and the M function rights in the first permission model specifically include:

Obtaining, according to the second request, the first permission model and the first certificate information in the second request, and

Providing, according to the authentication result of the M function rights, the online reading content corresponding to the plurality of function rights through which the authentication is passed to the terminal.

The method of claim 4, wherein the authenticating the first certificate information comprises:

Obtaining a valid time period in the first certificate information;

The method according to claim 5, wherein the parsing the first permission model comprises:

Comparing the effective time period of each of the M function rights with the current time, if the valid time period of the L function rights of the M function rights is after the current time, providing the The online reading content corresponding to the L functional rights is given to the terminal, where L is greater than or equal to 0, and is less than or equal to an integer of M.

A system for online digital content authentication, comprising: a service processing system, configured to receive a first request for online reading from a terminal, and obtain first user information in the first request, Obtaining first permission information corresponding to the first user information according to the correspondence between the stored permission information and the user information, and generating a first permission model according to the first permission information, the first permission model Include the M function rights owned by the user, where M is greater than or equal to 1, and obtain the first certificate information corresponding to the first permission model according to the correspondence between the stored certificate information and the permission model, and generate the first certificate information. a permission model and a second request for the first certificate information;

And an online reading system, configured to receive the second request, and authenticate the first certificate information included in the second request and the M function rights in the first permission model.

The system of claim 7, wherein the online reading system comprises: a receiving module, configured to receive the second request;

An obtaining module, configured to acquire the first permission model in the second request, and the first Certificate information;

The system according to claim 8, wherein the certificate authentication module comprises: a certificate validity time obtaining unit, configured to acquire a valid time limit in the first certificate information; and a certificate valid time authentication unit And comparing the valid time period of the first certificate information with the current time, if the current time is within the valid time period of the certificate, the certificate authentication is passed, otherwise the second request is rejected.

10. The system according to claim 8, wherein the authorization model authentication module performs authentication on the M functional rights in the permission model, including: